$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa File: 607e03b3-c1cd-33a7-9a62-9057775306ab.roa (raw, json) Hash identifier: 8dSVMPtH8M1qrsQ3J3INAmBcUfL6WPOzOJI5zoqwNZU= Subject key identifier: BF:43:72:08:6A:4A:8D:57:17:14:A1:B6:14:BE:32:FE:0D:41:EF:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3BCFE5580743197FBE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:cf:e5:58:07:43:19:7f:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bcd3b08d-2622-44bf-9487-473b1c451c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:52:40:36:7b:b0:34:4d:cd:c7:47:54:f1: 6d:6d:63:38:47:59:34:dd:28:4d:cf:ea:4f:06:cb: 79:1f:8d:1f:b6:24:d6:b1:cc:34:d8:85:49:7b:3e: 73:cf:d3:51:29:d7:e1:c8:e8:d7:28:e4:f2:78:ba: c6:ef:f8:60:3c:33:c3:0a:3b:17:27:00:87:cb:be: 1e:f7:82:4d:48:e8:1e:4c:f0:8f:75:5e:e6:b7:fd: 6d:c3:2b:9e:e9:a4:e2:28:af:fb:a7:09:1b:9a:71: 97:4a:fc:db:e8:13:ff:c6:29:82:3a:3c:9b:16:2f: 36:9c:3c:7c:51:f0:8e:31:9d:ae:95:91:d0:c3:3f: a2:ef:65:be:d0:f1:af:bb:f7:e7:c9:a0:04:14:41: 0c:3c:90:44:fe:ba:fb:82:5a:91:66:10:25:29:e4: 31:33:bb:cd:5c:fe:9a:32:a7:eb:0e:01:35:66:3a: 07:3f:2e:30:75:03:e9:ca:aa:1e:60:bf:a1:18:21: f9:07:2f:21:28:1e:71:d5:46:67:be:67:f7:7f:ba: 01:8e:d0:08:2a:36:f0:f8:c3:4b:6f:8e:5b:57:c6: e5:3f:ee:75:59:2d:83:20:1f:c9:6e:1b:f8:07:9f: 54:7c:8b:32:1c:85:33:4b:8f:90:ea:a3:bd:d3:dc: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:43:72:08:6A:4A:8D:57:17:14:A1:B6:14:BE:32:FE:0D:41:EF:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f8:ff:8b:3e:33:37:38:63:d3:95:9f:3d:8c:93:58:e3:47: c4:78:d5:f8:a8:81:46:af:86:e4:9c:f8:6d:6f:83:b2:cb:7c: d3:ba:0c:d5:a7:21:75:6e:b4:7a:b7:da:4a:ed:40:03:3b:36: 4c:4f:cb:ac:ae:06:ef:26:b3:a7:6a:ce:4b:70:4d:15:ac:ed: 4b:05:56:f2:4b:1f:4e:05:a3:92:18:d8:5e:d2:85:1c:29:1d: 0b:91:99:89:fd:1a:03:71:86:2f:09:a0:47:f0:40:5a:6a:8d: 8e:35:dc:bb:d3:c0:93:8a:cc:74:6f:fa:1a:b2:95:71:89:3b: 5e:26:db:ec:c0:db:e0:dc:8d:8b:e7:b2:57:4f:49:55:7c:fa: 6f:f2:d8:94:6c:ec:ce:cb:07:22:34:3c:a9:c8:ed:7b:fa:b9: 42:bb:20:02:54:44:4f:13:c4:45:df:04:d8:41:7b:a2:36:ac: b7:cc:10:34:92:8f:84:f3:7f:38:62:5f:c9:e8:76:69:ed:19: 32:0a:67:25:79:bf:ff:2e:d5:d9:86:17:9f:85:81:b3:fa:cc: 51:31:1e:8a:11:02:f5:9f:6d:82:10:5e:f1:b6:08:fd:6e:c0: 5b:ec:25:46:96:3f:f1:28:25:ec:01:8a:1d:0e:26:42:d2:9a: 40:fb:a8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjvP5VgHQxl/vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmNkM2IwOGQtMjYyMi00NGJmLTk0ODctNDczYjFjNDUxYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMpSQDZ7sDRNzcdHVPFtbWM4R1k03ShNz+pP Bst5H40ftiTWscw02IVJez5zz9NRKdfhyOjXKOTyeLrG7/hgPDPDCjsXJwCHy74e 94JNSOgeTPCPdV7mt/1twyue6aTiKK/7pwkbmnGXSvzb6BP/ximCOjybFi82nDx8 UfCOMZ2ulZHQwz+i72W+0PGvu/fnyaAEFEEMPJBE/rr7glqRZhAlKeQxM7vNXP6a MqfrDgE1ZjoHPy4wdQPpyqoeYL+hGCH5By8hKB5x1UZnvmf3f7oBjtAIKjbw+MNL b45bV8blP+51WS2DIB/Jbhv4B59UfIsyHIUzS4+Q6qO909z5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9DcghqSo1XFxShthS+Mv4NQe/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA3ZTAzYjMtYzFjZC0z M2E3LTlhNjItOTA1Nzc3NTMwNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb4/4s+Mzc4Y9OVnz2Mk1jjR8R41fiogUavhuSc+G1vg7LLfNO6DNWn IXVutHq32krtQAM7NkxPy6yuBu8ms6dqzktwTRWs7UsFVvJLH04Fo5IY2F7ShRwp HQuRmYn9GgNxhi8JoEfwQFpqjY413LvTwJOKzHRv+hqylXGJO14m2+zA2+DcjYvn sldPSVV8+m/y2JRs7M7LByI0PKnI7Xv6uUK7IAJURE8TxEXfBNhBe6I2rLfMEDSS j4TzfzhiX8nodmntGTIKZyV5v/8u1dmGF5+FgbP6zFExHooRAvWfbYIQXvG2CP1u wFvsJUaWP/EoJewBih0OJkLSmkD7qMA= -----END CERTIFICATE-----Generated at Sun May 11 04:32:18 2025 by rpki-client